COBIT 2019 Training: Enterprise IT Governance Framework – Amsterdam (Netherlands), 11–15 Oct 2027

COBIT 2019 is an enterprise IT governance framework: a structured set of principles, objectives and components that helps an organisation decide who directs information and technology, how it is managed and how its performance is measured. This 1-week course is for IT governance, risk and assurance practitioners, and each delegate builds a tailored governance system design for their own organisation. The subject is taught by Blackbird Training Centre.

Introduction

The course rests on three references. COBIT 2019 itself sets out six principles for a governance system, 40 governance and management objectives and eleven design factors for tailoring them. The CMMI-based capability scale rates each process from level 0 to level 5, replacing the process assessment model used by the earlier edition. ISO/IEC 38500, the international standard for governance of IT by the governing body, frames the board's evaluate, direct and monitor duties. The level is practitioner, and teaching is by case study and a design build using sample enterprises from banking and healthcare.

Course Objectives

• Distinguish governance from management in COBIT 2019 terms, and assign each of the five domains to the right accountable body.
• Compare COBIT 2019 with COBIT 5, setting out what changed in principles, objectives, components and performance measurement.
• Interpret the goals cascade to trace a stakeholder need through enterprise and alignment goals to specific objectives.
• Apply the design factors to raise or lower the priority of objectives for a given enterprise profile.
• Select target capability levels for priority processes and justify the gap between current and target levels.
• Justify a governance improvement roadmap to senior management using the implementation lifecycle phases.

Target Audience

• IT governance and IT strategy leads who shape the governance system and must decide which objectives deserve priority.
• IT risk and information security managers who link technology risk to enterprise risk and must judge which controls a design factor calls for.
• Internal and IT auditors who assess governance arrangements and must decide what capability level the evidence supports.
• Enterprise architects and IT service managers who run day-to-day processes and must choose which practices to strengthen first.
• Compliance and assurance professionals who report to boards on technology and must judge whether oversight duties are being met.

Course Outline

Day 1: The COBIT 2019 Governance System

• Governance vs Management: Evaluate, Direct and Monitor Compared With Plan, Build, Run and Monitor
• Six Governance System Principles: Stakeholder Value, Holistic Approach and Dynamic Design
• Three Governance Framework Principles: Conceptual Model, Openness and Alignment With Standards
• COBIT 2019 vs COBIT 5: Changes in Principles, Process Count and Enablers
• ISO/IEC 38500: Board Duties for Governance of IT and Their COBIT Mapping

Day 2: Objectives, Domains and Components

• Five Domains: EDM, APO, BAI, DSS and MEA Objectives and Their Purpose
• Governance Objectives vs Management Objectives: Who Owns Each and Why
• Seven Components: Processes, Structures, Policies, Information, Culture, People and Services
• Generic vs Variant Components: Standard Building Blocks Compared With Tailored Versions
• Responsibility Charts: RACI Assignments Linking Roles to Key Governance Practices

Day 3: Goals Cascade and Performance Measurement

• Goals Cascade: From Stakeholder Drivers to Enterprise Goals and Alignment Goals
• Enterprise Goals vs Alignment Goals: Business Outcomes Compared With IT Contributions
• CMMI-Based Capability Levels: Rating Processes From Level 0 to Level 5
• Process Capability vs Focus Area Maturity: Two Ways of Scoring Performance
• Metrics Selection: Choosing Indicators That Show Whether Alignment Goals Are Met

Day 4: Design Factors and Focus Areas

• Eleven Design Factors: Strategy, Risk Profile, Threat Landscape, Sourcing Model and Enterprise Size
• Design Factors vs Focus Areas: Tailoring Inputs Compared With Thematic Guidance Sets
• Focus Area Guidance: Small Enterprises, Cybersecurity, DevOps and Cloud Environments
• Priority Calculation: Converting Design Factor Scores Into Objective Importance Ratings
• Conflict Resolution: Reconciling Competing Design Factor Outcomes Into One Design

Day 5: Designing a Tailored Governance System

• Current vs Target State: Rating Priority Processes Against Required Capability Levels
• Case Design Build: Applying Design Factors and Priorities to a Sample Enterprise
• Implementation Lifecycle: Seven Phases From Drivers to Sustaining Momentum
• Business Case: Costs, Benefits and Risks of the Proposed Governance Changes
• Governance System Design: Finalising Objectives, Target Levels and Improvement Roadmap

Skills You Will Gain

• Goals cascade mapping
• Design factor analysis
• Capability level rating
• RACI chart construction
• Focus area selection
• Gap analysis
• Governance business case writing
• Implementation roadmap planning

Why Attend This Course

• From applying the full catalogue of objectives evenly to concentrating effort where design factors show it matters.
• From rating processes by opinion to scoring them on the CMMI-based capability scale.
• From describing governance and management as one activity to separating board oversight from executive delivery.
• From a general intention to improve governance to a finished governance system design with target levels and a roadmap.

Conclusion

Put simply, COBIT 2019 is a method for deciding how information and technology should be directed, run and measured in one particular organisation. The course makes three distinctions clear: governance against management, design factors against focus areas, and process capability against focus area maturity. It suits practitioners in IT governance, risk and assurance who need to tailor the framework rather than learn it in the abstract; delegates already holding COBIT 5 knowledge will see what the newer edition changes.

Course FAQs

What is COBIT 2019 in enterprise IT governance?

COBIT 2019 is a framework for governing and managing enterprise information and technology. It defines 40 governance and management objectives, seven types of components and eleven design factors that let each organisation build a governance system that fits its own needs.

What is the difference between design factors and focus areas in COBIT 2019?

Design factors are characteristics of the enterprise, such as risk profile or sourcing model, that change the priority of objectives. Focus areas are themed guidance sets, such as cybersecurity or small enterprises, that add specific practices to a chosen set of objectives.

Which standard does the COBIT 2019 enterprise IT governance course follow?

It follows the COBIT 2019 framework and its design guide, uses the CMMI-based capability scale for performance measurement, and maps board responsibilities to ISO/IEC 38500 for governance of IT.

Is the COBIT 2019 enterprise IT governance course right for an IT auditor?

Yes. An IT auditor uses the objectives, RACI charts and capability levels directly when assessing governance arrangements, and the design factor work explains why different organisations need different controls.

What does a delegate produce in the COBIT 2019 enterprise IT governance course?

Each delegate produces a tailored governance system design: the prioritised objectives for their organisation, target capability levels for key processes, a gap analysis, a short business case and an improvement roadmap.